{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,28]],"date-time":"2026-10-28T00:03:34Z","timestamp":1793145814989,"version":"4.5.0"},"reference-count":143,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,2,14]],"date-time":"2025-02-14T00:00:00Z","timestamp":1739491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,2,14]],"date-time":"2025-02-14T00:00:00Z","timestamp":1739491200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1007\/s10207-025-00992-7","type":"journal-article","created":{"date-parts":[[2025,2,14]],"date-time":"2025-02-14T13:27:13Z","timestamp":1739539633000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":34,"title":["Large language models for software vulnerability detection: a guide for researchers on models, methods, techniques, datasets, and metrics"],"prefix":"10.1007","volume":"24","author":[{"given":"Seyed Mohammad","family":"Taghavi Far","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Farid","family":"Feyzi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,2,14]]},"reference":[{"key":"992_CR1","unstructured":"Li, H., Hao, Y., Zhai, Y., Qian, Z.: The Hitchhiker's guide to program analysis a journey with large language models (2023). arXiv:2308.00245v3"},{"key":"992_CR2","doi-asserted-by":"crossref","unstructured":"Sadowski, C., Yi, J.: How developers use data race detection tools. In: Proceedings of the 5th Workshop on Evaluation and Usability of Programming Languages and Tools, pp. 43\u201351 (2014)","DOI":"10.1145\/2688204.2688205"},{"key":"992_CR3","unstructured":"Gadelha, M.Y.R., Steffinlongo, E., Cordeiro, L.C., Fischer, B., Nicole, D.A.: Smt-based refutation of spurious bug reports in the clang static analyzer. In: Atlee, J.M., Bultan, T., Whittle, J. (eds.) Proceedings of the 41st International Conference on Software Engineering: Companion Proceedings, ICSE 2019, Montreal, QC, Canada, May 25\u201331, 2019, pp. 11\u201314. IEEE (2019)"},{"key":"992_CR4","doi-asserted-by":"crossref","unstructured":"White, M., Tufano, M., Vendome, C., Poshyvanyk, D.: Deep learning code fragments for code clone detection. In: Proceedings of the 31st IEEE\/ACM International Conference on Automated Software Engineering, pp. 87\u201398 (2016)","DOI":"10.1145\/2970276.2970326"},{"key":"992_CR5","doi-asserted-by":"crossref","unstructured":"Gupta, R., Pal, S., Kanade, A., Shevade, S.: Deepfix: fixing common c language errors by deep learning. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 31, p. 1 (2017)","DOI":"10.1609\/aaai.v31i1.10742"},{"key":"992_CR6","doi-asserted-by":"crossref","unstructured":"Li, Y., Wang, S., Nguyen, T.N.: Dlfix: context-based code transformation learning for automated program repair. In: Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering, pp. 602\u2013614 (2020)","DOI":"10.1145\/3377811.3380345"},{"key":"992_CR7","doi-asserted-by":"crossref","unstructured":"White, M., Tufano, M., Martinez, M., Monperrus, M., Poshyvanyk, D.: Sorting and transforming program repair ingredients via deep learning code similarities. In: 2019 IEEE 26th International Conference on Software Analysis, Evolution and Reengineering (SANER), pp. 479\u2013490. IEEE (2019)","DOI":"10.1109\/SANER.2019.8668043"},{"key":"992_CR8","doi-asserted-by":"crossref","unstructured":"Jiang, N., Lutellier, T., Tan, L.: Cure: code-aware neural machine translation for automatic program repair. In: 2021 IEEE\/ACM 43rd International Conference on Software Engineering (ICSE), pp. 1161\u20131173 (2021)","DOI":"10.1109\/ICSE43902.2021.00107"},{"key":"992_CR9","doi-asserted-by":"crossref","unstructured":"Li, Y., Wang, S., Nguyen, T.N.: Dear: a novel deep learning-based approach for automated program repair. In: Proceedings of the 44th International Conference on Software Engineering, pp. 511\u2013523 (2022)","DOI":"10.1145\/3510003.3510177"},{"key":"992_CR10","doi-asserted-by":"crossref","unstructured":"Saha, D., Tarek, S., Yahyaei, K., Saha, S.K., Zhou, J., Tehranipoor, M., Farahmandi, F.: LLM for SoC security a paradigm shift (2023). arXiv:2310.06046v1","DOI":"10.1109\/ACCESS.2024.3427369"},{"key":"992_CR11","doi-asserted-by":"publisher","first-page":"23733","DOI":"10.1109\/ACCESS.2024.3363469","volume":"12","author":"MA Ferrag","year":"2024","unstructured":"Ferrag, M.A., et al.: Revolutionizing cyber threat detection with large language models: a privacy-preserving BERT-based lightweight model for IoT\/IIoT devices. IEEE Access 12, 23733\u201323750 (2024). https:\/\/doi.org\/10.1109\/ACCESS.2024.3363469","journal-title":"IEEE Access"},{"key":"992_CR12","unstructured":"Noever, D.: Can large language models find and fix vulnerable software? (2023). arXiv:2308.10345v1"},{"key":"992_CR13","doi-asserted-by":"publisher","unstructured":"Omar, M., Shiaeles, S.: \u201cVulDetect: a novel technique for detecting software vulnerabilities using language models. In: 2023 IEEE International Conference on Cyber Security and Resilience (CSR), Venice, Italy, pp. 105\u2013110 (2023). https:\/\/doi.org\/10.1109\/CSR57506.2023.10224924","DOI":"10.1109\/CSR57506.2023.10224924"},{"key":"992_CR14","unstructured":"Verizon 2023 Data Breach Investigations Report: https:\/\/www.verizon.com\/business\/resources\/T3b1\/reports\/2023-data-breach-investigations-report-dbir.pdf. Accessed 2 Oct 2024"},{"key":"992_CR15","doi-asserted-by":"crossref","unstructured":"Zhang, C., Liu, H., Zeng, J., Yang, K., Li, Y., Li, H.: Prompt-enhanced software vulnerability detection using ChatGPT (2024). arXiv:2308.12697v2","DOI":"10.1145\/3639478.3643065"},{"key":"992_CR16","unstructured":"Hou, X., Zhao, Y., Liu, Y., Yang, Z., Wang, K., Li, L., Wang, H.: Large language models for software engineering: a systematic literature review (2024). arXiv:2308.10620v4"},{"key":"992_CR17","doi-asserted-by":"publisher","unstructured":"Yiannis, C., Norbert, T., Ridhi, J., Youcheng, S., Mohamed Amine, F., Lucas, C.: A New era in software security: towards self-healing software via large language models and formal verification (2023). https:\/\/doi.org\/10.48550\/arXiv.2305.14752","DOI":"10.48550\/arXiv.2305.14752"},{"key":"992_CR18","unstructured":"OpenAI. GPT-4 Technical Report. 2023. arXiv: 2303.08774 [cs. CL]"},{"key":"992_CR19","unstructured":"Devlin, J., Ming-Wei, C., Lee, K., Toutanova, K.: Bert: pre-training of deep bidirectional transformers for language understanding (2019). arXiv.org, arXiv:1810.04805v2"},{"key":"992_CR20","unstructured":"Almazrouei, E., Alobeidli, H., Alshamsi, A., Cappelli, A., Cojocaru, R., et al.: The Falcon series of open language models (2023). arXiv:2311.16867"},{"key":"992_CR21","unstructured":"Penedo, G., Malartic, Q., Hesslow, D., Cojocaru, R., Cappelli, A., Alobeidli, H., Pannier, B., Almazrouei, W., Launay, J.: The RefinedWeb dataset for Falcon LLM: outperforming curated Corpora with Web Data, and Web Data Only (2023). arXiv:2306.01116 [cs.CL]"},{"key":"992_CR22","unstructured":"Bommasani, R., et al.: On the opportunities and risks of foundation models. Eng, arXiv.org (2021). Available: https:\/\/crfm.stanford.edu\/assets\/report.pdf"},{"key":"992_CR23","unstructured":"Sakaoglu, S.S.: KARTAL: web application vulnerability hunting using large language models: novel method for detecting logical vulnerabilities in web applications with finetuned large language models. KTH Royal Institute of Technology, Dissertation (2023)"},{"key":"992_CR24","doi-asserted-by":"publisher","unstructured":"Purba, M., Ghosh, A., Radford, B., Chu, B.: Software vulnerability detection using large language models. In: 2023 IEEE 34th International Symposium on Software Reliability Engineering Workshops (ISSREW), Florence, Italy, pp. 112\u2013119 (2023). https:\/\/doi.org\/10.1109\/ISSREW60843.2023.00058","DOI":"10.1109\/ISSREW60843.2023.00058"},{"key":"992_CR25","doi-asserted-by":"publisher","unstructured":"Boyko, J., Cohen, J., Fox, N., Veiga, M.H., Li, J.I.H., Liu, J., Modenesi, B., Rauch, A.H., Reid, K.N., Tribedi, S., Visheratina, A., Xie, X.: An interdisciplinary outlook on large language models for scientific research. https:\/\/doi.org\/10.48550\/arXiv.2311.04929","DOI":"10.48550\/arXiv.2311.04929"},{"key":"992_CR26","doi-asserted-by":"publisher","unstructured":"Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A.N., Kaiser, L., Polosukhin, I.: Attention is all you need. https:\/\/doi.org\/10.48550\/arXiv.1706.03762","DOI":"10.48550\/arXiv.1706.03762"},{"key":"992_CR27","unstructured":"Zhao, W.X., Zhou, K., Li, J., Tang, T., et al.: A survey of large language models (2023). arXiv:2303.18223v13"},{"key":"992_CR28","unstructured":"Xia, C.S., Wei, Y., Zhang, L.: Practical program repair in the era of large pre-trained language models (2022). arXiv:2210.14179v1"},{"key":"992_CR29","doi-asserted-by":"crossref","unstructured":"Zheng, Z., Ning, K., Chen, J., Wang, Y., Chen, W., Guo, L., Wang, W.: Towards an understanding of large language models in software engineering tasks (2023). arXiv:2308.11396v1","DOI":"10.1007\/s10664-024-10602-0"},{"issue":"7","key":"992_CR30","doi-asserted-by":"publisher","first-page":"3580","DOI":"10.1109\/TKDE.2024.3352100","volume":"36","author":"S Pan","year":"2024","unstructured":"Pan, S., Luo, L., Wang, Y., Chen, C., Wang, J., Wu, X.: Unifying large language models and knowledge graphs: a roadmap. IEEE Trans. Knowl. Data Eng. 36(7), 3580\u20133599 (2024). https:\/\/doi.org\/10.1109\/TKDE.2024.3352100","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"992_CR31","first-page":"1536","volume":"2020","author":"Z Feng","year":"2020","unstructured":"Feng, Z., Guo, D., Tang, D., Duan, N., Feng, X., Gong, M., Shou, L., Qin, B., Liu, T., Jiang, D., et al.: Codebert: a pre-trained model for programming and natural languages. Find. Assoc. Comput. Linguist. 2020, 1536\u20131547 (2020)","journal-title":"Find. Assoc. Comput. Linguist."},{"key":"992_CR32","unstructured":"Chen, M., Tworek, J., Jun, H., Yuan, Q., Pinto, H.P.D.O., Kaplan, J., Edwards, H., Burda, Y., Joseph, N., Brockman, G., et al.: Evaluating large language models trained on code (2021). arXiv:2107.03374"},{"key":"992_CR33","unstructured":"Guo, D., Ren, S., Lu, S., Feng, Z., Tang, D., Liu, S., Zhou, L., Duan, N., Svyatkovskiy, A., Fu, S., Tufano, M., Deng, S.K., Clement, C., Drain, D., Sundaresan, N., Yin, J., Jiang, D., Zhou, M.: GraphCodeBERT-Pre-training code representations with data flow (2021). arXiv:2009.08366 [cs.SE]"},{"key":"992_CR34","doi-asserted-by":"publisher","unstructured":"Huang, K., et al.: An empirical study on fine-tuning large language models of code for automated program repair. In: 2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE), Luxembourg, Luxembourg, pp. 1162\u20131174 (2023). https:\/\/doi.org\/10.1109\/ASE56229.2023.00181","DOI":"10.1109\/ASE56229.2023.00181"},{"key":"992_CR35","doi-asserted-by":"crossref","unstructured":"Wang, S., Chollak, D., Movshovitz-Attias, D., Tan, L.: Bugram: bug detection with n-gram language models. In: ASE, pp. 708\u2013719 (2016)","DOI":"10.1145\/2970276.2970341"},{"key":"992_CR36","unstructured":"Raffel, C., Shazeer, N., Roberts, A., Lee, K., Narang, S., Matena, M., Zhou, Y., Li, W., Liu, P.J.: Exploring the limits of transfer learning with a unified text-to-text transformer (2020). arXiv:1910.10683 [cs.LG]"},{"key":"992_CR37","unstructured":"Yeti\u015ftiren, B., \u00d6zsoy, I., Ayerdem, M., T\u00fcz\u00fcn, E.: Evaluating the code quality of AI-assisted code generation tools: an empirical study on GitHub Copilot, Amazon CodeWhisperer, and ChatGPT (2023). arXiv:2304.10778 [cs.SE]"},{"key":"992_CR38","unstructured":"Karl, T., Hayretdin, B.: Harnessing large language models for software vulnerability detection: a comprehensive benchmarking study (2024). arXiv:2405.15614 [cs.CR]"},{"key":"992_CR39","doi-asserted-by":"publisher","unstructured":"McGraw, G.: Automated code review tools for security. In: Computer 41.12, pp. 108\u2013111 (2008). https:\/\/doi.org\/10.1109\/MC.2008.514","DOI":"10.1109\/MC.2008.514"},{"key":"992_CR40","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3057044","author":"OS Ferda","year":"2021","unstructured":"Ferda, O.S., Banu, G.: Holistic web application security visualization for multi-project and multi-phase dynamic application security test results. IEEE Access. (2021). https:\/\/doi.org\/10.1109\/ACCESS.2021.3057044","journal-title":"IEEE Access."},{"key":"992_CR41","unstructured":"Azar, K.Z., et al.: Fuzz, penetration, and AI testing for SoC security verification: challenges and solutions. In: Cryptology ePrint Archive (2022)"},{"issue":"24","key":"992_CR42","first-page":"9119","volume":"10","author":"F Mateo Tudela","year":"2020","unstructured":"Mateo Tudela, F., Bermejo Higuera, J.-R., Bermejo Higuera, J., Sicilia Montalvo, J.-A., Argyros, M.I.: On combining static, dynamic and interactive analysis security testing tools to improve owasp top ten security vulnerability detection in web applications. Eng. Appl. Sci. 10(24), 9119 (2020)","journal-title":"Eng. Appl. Sci."},{"key":"992_CR43","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1504\/IJSETA.2017.086988","volume":"2","author":"A Tahmid","year":"2017","unstructured":"Tahmid, A., Tawhid, Md., Ahad, N., Ahmed, S., Sakib, K.: Code sniffer: a risk based smell detection framework to enhance code quality using static code analysis. Int. J. Softw. Eng. Technol. Appl. 2, 41 (2017). https:\/\/doi.org\/10.1504\/IJSETA.2017.086988","journal-title":"Int. J. Softw. Eng. Technol. Appl."},{"key":"992_CR44","unstructured":"Foo, D., Yeo, J., Xiao, H., Sharma, A.: The dynamics of software composition analysis (2019). arXiv:1909.00973 [cs.SE]"},{"key":"992_CR45","doi-asserted-by":"publisher","unstructured":"Nasif, I., Seaver, T., Laurie, W.: A comparative study of vulnerability reporting by software composition analysis tools. In: Proceedings of the 15th ACM\/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM) (ESEM '21), Article 5, pp. 1\u201311. Association for Computing Machinery, New York (2021). https:\/\/doi.org\/10.1145\/3475716.3475769","DOI":"10.1145\/3475716.3475769"},{"key":"992_CR46","doi-asserted-by":"publisher","unstructured":"Zhao, L., Chen, S., Xu, Z., Liu, C., Zhang, L., Wu, J., Sun, J., Liu, Y.: Software composition analysis for vulnerability detection: an empirical study on java projects. In: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE 2023), pp. 960\u2013972. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3611643.3616299","DOI":"10.1145\/3611643.3616299"},{"key":"992_CR47","doi-asserted-by":"publisher","unstructured":"\u010cisar, P., \u010cisar, S.M.: The framework of runtime application self-protection technology. In: 2016 IEEE 17th International Symposium on Computational Intelligence and Informatics (CINTI), Budapest, Hungary, pp. 000081\u2013000086 (2016). https:\/\/doi.org\/10.1109\/CINTI.2016.7846383","DOI":"10.1109\/CINTI.2016.7846383"},{"key":"992_CR48","unstructured":"Alexander, F.: Runtime application self-protection (RASP), investigation of the effectiveness of a RASP solution in protecting known vulnerable target applications. SANS Whitepaper. 30 April 2019. https:\/\/www.sans.org\/white-papers\/38950\/"},{"key":"992_CR49","unstructured":"Huaming, C., Muhammad, A.B.: Security for machine learning-based software systems: a survey of threats, practices and challenges (2022). arXiv:2201.04736v2 [cs.CR]"},{"key":"992_CR50","unstructured":"Li, Z., Dutta, S., Naik, M.: LLM-assisted static analysis for detecting security vulnerabilities (2024). arXiv:2405.17238 [cs.CR]"},{"key":"992_CR51","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1016\/j.infsof.2015.08.002","volume":"68","author":"K Goseva-Popstojanova","year":"2015","unstructured":"Goseva-Popstojanova, K., Perhinschi, A.: On the capability of static code analysis to detect security vulnerabilities. Inf. Softw. Technol. 68, 18\u201333 (2015). https:\/\/doi.org\/10.1016\/j.infsof.2015.08.002","journal-title":"Inf. Softw. Technol."},{"key":"992_CR52","doi-asserted-by":"publisher","unstructured":"Kulenovic, M., Donko, D.: A survey of static code analysis methods for security vulnerabilities detection. In: 2014 37th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), Opatija, Croatia, pp. 1381\u20131386 (2014). https:\/\/doi.org\/10.1109\/MIPRO.2014.6859783","DOI":"10.1109\/MIPRO.2014.6859783"},{"key":"992_CR53","doi-asserted-by":"crossref","unstructured":"Puspaningrum, A., Al Hilmi, M.A., Muhamad Mustamiin, D., Ginanjar, M.I.: Vulnerable source code detection using SonarCloud code analysis (2023). arXiv:2307.02446 [cs.CY]","DOI":"10.5220\/0011862600003575"},{"key":"992_CR54","doi-asserted-by":"publisher","unstructured":"Fan, A., et al.: Large language models for software engineering: survey and open problems. In: 2023 IEEE\/ACM International Conference on Software Engineering: Future of Software Engineering (ICSE-FoSE), Melbourne, Australia, pp. 31\u201353 (2023). https:\/\/doi.org\/10.1109\/ICSE-FoSE59343.2023.00008","DOI":"10.1109\/ICSE-FoSE59343.2023.00008"},{"key":"992_CR55","doi-asserted-by":"crossref","unstructured":"Wilhjelm, C., Younis, A.A.: A threat analysis methodology for security requirements elicitation in machine learning based systems. In: 2020 IEEE 20th International Conference on Software Quality, Reliability and Security Companion (QRS-C), pp. 426\u2013433. IEEE (2020)","DOI":"10.1109\/QRS-C51114.2020.00078"},{"key":"992_CR56","doi-asserted-by":"crossref","unstructured":"Cheng, G.J., Cleland-Huang, J.: Semantically enhanced software traceability using deep learning techniques. In: Proceedings of the 39th International Conference on Software Engineering, Buenos Aires, Argentina, pp. 3\u201314 (2017)","DOI":"10.1109\/ICSE.2017.9"},{"key":"992_CR57","doi-asserted-by":"crossref","unstructured":"White, J., Hays, S., Fu, Q., Spencer-Smith, J., Schmidt, D.C.: ChatGPT prompt patterns for improving code quality, refactoring, requirements elicitation, and software design (2023). arXiv:2303.07839","DOI":"10.1007\/978-3-031-55642-5_4"},{"key":"992_CR58","doi-asserted-by":"publisher","unstructured":"He, J., Vechev, M.: Large language models for code: security hardening and adversarial testing. In: Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS '23), pp. 1865\u20131879. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3576915.3623175","DOI":"10.1145\/3576915.3623175"},{"key":"992_CR59","unstructured":"Liu, Y., Ratnadira Widyasari, T.L.C., Tantithamthavorn, C., Li, L., Le, X.B.D., Lo, D.: Refining ChatGPT-generated code characterizing and mitigating code quality issues (2023). arXiv:2307.12596v2"},{"key":"992_CR60","doi-asserted-by":"publisher","unstructured":"Imgrund, E., Ganz, T., H\u00e4rterich, M., Pirch, L., Risse, N., Rieck, K.: Broken promises: measuring confounding effects in learning-based vulnerability discovery. In: Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec '23), pp. 149\u2013160. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3605764.3623915","DOI":"10.1145\/3605764.3623915"},{"key":"992_CR61","unstructured":"Pedro, R., Castro, D., Carreira, P., Santos, N.: From prompt injections to SQL injection attacks: how protected is your LLM-integrated web application? (2023). arXiv:2308.01990v3"},{"key":"992_CR62","doi-asserted-by":"publisher","unstructured":"Giacomo, L., Manuel, S., Volker, H., Tommaso, C.: Analyzing declarative deployment code with large language models, pp. 289\u2013296 (2023). https:\/\/doi.org\/10.5220\/0011991200003488","DOI":"10.5220\/0011991200003488"},{"key":"992_CR63","doi-asserted-by":"crossref","unstructured":"Lemieux, C., Inala, J.P., Lahiri, S.K., Sen, S.: Codamosa: escaping coverage plateaus in test generation with pre-trained large language models. In: ICSE (2023)","DOI":"10.1109\/ICSE48619.2023.00085"},{"key":"992_CR64","unstructured":"Inala, L.J.P., Lahiri, S.K., Sen, S.: Codamosa: escaping coverage plateaus in test generation with pre-trained large language models. In: International Conference on Software Engineering (ICSE) (2023)"},{"key":"992_CR65","doi-asserted-by":"crossref","unstructured":"Alhamed, M., Storer, T.: Evaluation of context-aware language models and experts for effort estimation of software maintenance issues. In 2022 IEEE International Conference on Software Maintenance and Evolution (ICSME), pp. 129\u2013138. IEEE (2022)","DOI":"10.1109\/ICSME55016.2022.00020"},{"key":"992_CR66","doi-asserted-by":"publisher","first-page":"326","DOI":"10.3390\/fi15100326","volume":"15","author":"Z Szab\u00f3","year":"2023","unstructured":"Szab\u00f3, Z., Bilicki, V.: A new approach to web application security: utilizing GPT language models for source code inspection. Future Internet 15, 326 (2023). https:\/\/doi.org\/10.3390\/fi15100326","journal-title":"Future Internet"},{"key":"992_CR67","doi-asserted-by":"publisher","unstructured":"Chen, Y., Ding, Z., Alowain, L., Chen, X., Wagner, D.: DiverseVul: a new vulnerable source code dataset for deep learning based vulnerability detection. In: Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses (RAID '23), pp. 654\u2013668. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3607199.3607242","DOI":"10.1145\/3607199.3607242"},{"key":"992_CR68","unstructured":"Sean Patrick, M.: Applications of transfer learning from malicious to vulnerable binaries. Graduate Student Theses, Dissertations, & Professional Papers, p. 12187 (2023). https:\/\/scholarworks.umt.edu\/etd\/12187"},{"key":"992_CR69","doi-asserted-by":"crossref","unstructured":"Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., Fritz, M.: Not what you\u2019ve signed up for: compromising real-world LLM-integrated applications with indirect prompt injection (2023). arXiv:2302.12173v2 [cs.CR]","DOI":"10.1145\/3605764.3623985"},{"key":"992_CR70","doi-asserted-by":"publisher","unstructured":"Mohamed Amine, F., Fatima, A., Ammar, B., Bilel, C., Abdechakour, M., Norbert, T.: Generative AI and large language models for cyber security: all insights you need (2024). https:\/\/doi.org\/10.48550\/arXiv.2405.12750","DOI":"10.48550\/arXiv.2405.12750"},{"key":"992_CR71","unstructured":"Benjamin, K.Y.: Building resilient SMEs: harnessing large language models for cyber security in Australia (2023). arXiv preprint arXiv:2306.02612v1"},{"key":"992_CR72","doi-asserted-by":"crossref","unstructured":"Zhou, X., Verma, R.M.: Vulnerability detection via multimodal learning: datasets and analysis. In: Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security, pp. 1225\u20131227 (2022)","DOI":"10.1145\/3488932.3527288"},{"key":"992_CR73","doi-asserted-by":"publisher","unstructured":"Mamede, C., Pinconschi, E., Abreu, R., Campos, J.: Exploring transformers for multi-label classification of java vulnerabilities. In: 2022 IEEE 22nd International Conference on Software Quality, Reliability and Security (QRS), Guangzhou, China, pp. 43\u201352 (2022). https:\/\/doi.org\/10.1109\/QRS57517.2022.00015","DOI":"10.1109\/QRS57517.2022.00015"},{"key":"992_CR74","doi-asserted-by":"publisher","unstructured":"Thapa, C., Jang, S.I., Ahmed, M.E., Camtepe, S., Pieprzyk, S., Nepal, S.: Transformer-based language models for software vulnerability detection. In: Proceedings of the 38th Annual Computer Security Applications Conference (ACSAC '22), pp. 481\u2013496. Association for Computing Machinery, New York (2022). https:\/\/doi.org\/10.1145\/3564625.356798","DOI":"10.1145\/3564625.356798"},{"key":"992_CR75","unstructured":"Ferrag, M.A., Battah, A., Tihanyi, N., Debbah, M., Lestable, T., Cordeiro, L.C.: SecureFalcon the next cyber reasoning system for cyber security (2023). arXiv:2307.06616v1"},{"key":"992_CR76","doi-asserted-by":"publisher","unstructured":"Tihanyi, N., Bisztray, T., Jain, R., Ferrag, M.A., Cordeiro, L.C., Mavroeidis, C.: The FormAI dataset: generative AI in software security through the lens of formal verification. In: Proceedings of the 19th International Conference on Predictive Models and Data Analytics in Software Engineering (PROMISE 2023), pp. 33\u201343. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3617555.3617874","DOI":"10.1145\/3617555.3617874"},{"key":"992_CR77","unstructured":"Steenhoek, B., Rahman, M.M., Roy, M.K., Alam, M.S., Barr, E.T., Le, W.: A comprehensive study of the capabilities of large language models for vulnerability detection (2024). arXiv:2403.17218v1"},{"key":"992_CR78","doi-asserted-by":"crossref","unstructured":"Pearce, H., Tan, B., Ahmad, B., Karri, R., Dolan-Gavitt, B.: Examining zero-shot vulnerability repair with large language models (2022). arXiv:2112.02125v3","DOI":"10.1109\/SP46215.2023.10179324"},{"key":"992_CR79","doi-asserted-by":"publisher","unstructured":"Pearce, H., Ahmad, B., Tan, B., Dolan-Gavitt, B., Karri, R.: Asleep at the keyboard? Assessing the security of GitHub Copilot\u2019s code contributions. In: IEEE S&P (2022). https:\/\/doi.org\/10.1109\/SP46214.2022.9833571","DOI":"10.1109\/SP46214.2022.9833571"},{"key":"992_CR80","unstructured":"Khan, M.F.A., Ramsdell, M., Falor, E., Karimi, H.: Assessing the promise and pitfalls of ChatGPT for automated code generation (2023). arXiv:2311.02640v1"},{"key":"992_CR81","doi-asserted-by":"publisher","unstructured":"Motlagh, F.M., Christoph, M., Feng, C., Pejman, N., Mehrdad, H., Mehryar, M.: Large language models in cybersecurity: state-of-the-art (2024). https:\/\/doi.org\/10.48550\/arXiv.2402.00891","DOI":"10.48550\/arXiv.2402.00891"},{"key":"992_CR82","doi-asserted-by":"crossref","unstructured":"Heiding, F., Schneier, B., Vishwanath, A., Bernstein, J., Park, P.S.: Devising and detecting phishing large language models versus smaller human models (2023). arXiv:2308.12287v2","DOI":"10.1109\/ACCESS.2024.3375882"},{"key":"992_CR83","unstructured":"Koide, T., Fukushi, N., Nakano, H., Chiba, D.: Detecting phishing sites using ChatGPT (2024). arXiv:2306.05816v2"},{"key":"992_CR84","doi-asserted-by":"crossref","unstructured":"Apruzzese, G., Anderson, H.S., Dambra, S., Freeman, D., Pierazzi, F., Roundy, K.V.: Real attackers don\u2019t compute gradients: bridging the gap between adversarial ml research and practice. In: SaTML (2023)","DOI":"10.1109\/SaTML54575.2023.00031"},{"issue":"3","key":"992_CR85","doi-asserted-by":"crossref","first-page":"672","DOI":"10.3390\/make3030034","volume":"3","author":"L Tang","year":"2021","unstructured":"Tang, L., Mahmoud, Q.H.: A survey of machine learning based solutions for phishing website detection. Mach. Learn. Knowl. Extract. 3(3), 672\u2013694 (2021)","journal-title":"Mach. Learn. Knowl. Extract."},{"key":"992_CR86","doi-asserted-by":"publisher","unstructured":"Weng, G., Andrzejak, A.: Automatic bug fixing via deliberate problem solving with large language models. In: 2023 IEEE 34th International Symposium on Software Reliability Engineering Workshops (ISSREW), Florence, Italy, pp. 34\u201336 (2023). https:\/\/doi.org\/10.1109\/ISSREW60843.2023.00040","DOI":"10.1109\/ISSREW60843.2023.00040"},{"key":"992_CR87","doi-asserted-by":"publisher","unstructured":"Huang, K., Yang, S., Sun, H., Sun, C., Li, X., Zhang, Y.: Repairing security vulnerabilities using pre-trained programming language models. In: 2022 52nd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W), Baltimore, pp. 111\u2013116 (2022) https:\/\/doi.org\/10.1109\/DSN-W54100.2022.00027","DOI":"10.1109\/DSN-W54100.2022.00027"},{"key":"992_CR88","unstructured":"Zhang, Q., Fang, C., Xie, Y., Ma, Y.S., Sun, W., Yang, Y., Chen, Z.: A systematic literature review on large language models for automated program repair (2024). arXiv:2405.01466 [cs.SE]"},{"key":"992_CR89","doi-asserted-by":"publisher","unstructured":"Happe, A., Cito, J.: Getting pwn\u2019d by AI: penetration testing with large language models. In: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE 2023), pp. 2082\u20132086. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3611643.3613083","DOI":"10.1145\/3611643.3613083"},{"key":"992_CR90","doi-asserted-by":"crossref","unstructured":"Sun, Y., Wu, D., Xue, Y., Liu, H., Wang, H., Xu, Z., Xie, X., Liu, Y.: GPTScan: detecting logic vulnerabilities in smart contracts by combining GPT with program analysis (2023). arXiv:2308.03314v2","DOI":"10.1145\/3597503.3639117"},{"key":"992_CR91","doi-asserted-by":"publisher","unstructured":"Das, S.S., Dutta, A., Purohit, S., Serra, E., Halappanavar, M., Pothen, A.: Towards automatic mapping of vulnerabilities to attack patterns using large language models. In: 2022 IEEE International Symposium on Technologies for Homeland Security (HST), Boston, pp. 1\u20137 (2022). https:\/\/doi.org\/10.1109\/HST56032.2022.10025459","DOI":"10.1109\/HST56032.2022.10025459"},{"key":"992_CR92","unstructured":"Cheshkov, A., Zadorozhny, P., Levichev, R.: Evaluation of ChatGPT model for vulnerability detection. arXiv:2304.07232v1"},{"key":"992_CR93","doi-asserted-by":"crossref","unstructured":"Ullah, S., Han, M., Pujar, S., Pearce, H., Coskun, A., Stringhini, G.: LLMs cannot reliably identify and reason about security vulnerabilities (Yet?): a comprehensive evaluation, framework, and benchmarks (2024). arXiv:2312.12575v2","DOI":"10.1109\/SP54263.2024.00210"},{"key":"992_CR94","doi-asserted-by":"crossref","unstructured":"Guo, Y., Patsakis, C., Hu, Q., Tang, Q., Casino, F.: Outside the comfort zone: analysing LLM capabilities in software vulnerability detection (2024). arXiv:2408.16400 [cs.CR]","DOI":"10.1007\/978-3-031-70879-4_14"},{"key":"992_CR95","doi-asserted-by":"publisher","unstructured":"Zhang, X., Zhang, F., Zhao, B., Zhou, B., Xiao, B.: VulD-transformer: source code vulnerability detection via transformer. In: Proceedings of the 14th Asia-Pacific Symposium on Internetware (Internetware '23), pp. 185\u2013193. Association for Computing Machinery, New York (2023). https:\/\/doi.org\/10.1145\/3609437.3609451","DOI":"10.1145\/3609437.3609451"},{"key":"992_CR96","doi-asserted-by":"crossref","unstructured":"Zhou, X., Cao, S., Sun, X., Lo, D.: Large language model for vulnerability detection and repair: literature review and the road ahead (2024). arXiv:2404.02525v3 [cs.SE]","DOI":"10.1145\/3708522"},{"key":"992_CR97","unstructured":"Yang, A.Z.H., Tian, H., Ye, H., Martins, R., Goues, C.L.: Security vulnerability detection with multitask self-instructed fine-tuning of large language models (2024). arXiv:2406.05892 [cs.CR]"},{"key":"992_CR98","doi-asserted-by":"crossref","unstructured":"Shestov, A., Levichev, R., Mussabayev, R., Maslov, E., Cheshkov, A., Zadorozhny, P.: Finetuning large language models for vulnerability detection (2024). arXiv:2401.17010v5 [cs.CR]","DOI":"10.1109\/ACCESS.2025.3546700"},{"key":"992_CR99","doi-asserted-by":"publisher","first-page":"109291","DOI":"10.1016\/j.engappai.2024.109291","volume":"138","author":"D deFitero-Dominguez","year":"2024","unstructured":"deFitero-Dominguez, D., Garcia-Lopez, E., Garcia-Cabot, A., Martinez-Herraiz, J.J.: Enhanced automated code vulnerability repair using large language models. Eng. Appl. Artif. Intell. 138, 109291 (2024). https:\/\/doi.org\/10.1016\/j.engappai.2024.109291","journal-title":"Eng. Appl. Artif. Intell."},{"key":"992_CR100","unstructured":"Zhai, Y., Tong, S., Li, X., Cai, M., Qu, Q., Lee, Y.J., Ma, Y.: Investigating the catastrophic forgetting in multimodal large language models (2023). arXiv:2309.10313v4 [cs.CL]"},{"key":"992_CR101","doi-asserted-by":"crossref","unstructured":"Zhang, J., Bu, H., Wen, H., Liu, Y., Fei, H., Xi, R., Li, L., Yang, Y., Zhu, H., Meng, D.: When LLMs meet cybersecurity: a systematic literature review (2024). arXiv:2405.03644v2 [cs.CR]","DOI":"10.1186\/s42400-025-00361-w"},{"key":"992_CR102","unstructured":"Hu, E.J., Shen, Y., Wallis, P., Allen-Zhu, Z., Li, Y., Wang, S., Wang, L., Chen, W.: Lora: low-rank adaptation of large language models. In: The Tenth International Conference on Learning Representations, ICLR 2022, Virtual Event, April 25\u201329, 2022. OpenReview.net (2022)"},{"key":"992_CR103","unstructured":"Perez, F., Ribeiro, I.: Ignore previous prompt: attack techniques for language models. In: NeurIPS ML safety workshop (2022)"},{"key":"992_CR104","unstructured":"Ruder, S.: An overview of multi-task learning in deep neural networks (2017). arXiv:1706.05098v1 [cs.LG]"},{"issue":"12","key":"992_CR105","doi-asserted-by":"publisher","first-page":"5586","DOI":"10.1109\/TKDE.2021.3070203","volume":"34","author":"Y Zhang","year":"2022","unstructured":"Zhang, Y., Yang, Q.: A survey on multi-task learning. IEEE Trans. Knowl. Data Eng. 34(12), 5586\u20135609 (2022). https:\/\/doi.org\/10.1109\/TKDE.2021.3070203","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"992_CR106","unstructured":"Chen, S., Zhang, Y., Yang, Q.: Multi-task learning in natural language processing: an overview (2024). arXiv:2109.09138v2[cs.AI]"},{"key":"992_CR107","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1038\/s42256-023-00626-4","volume":"5","author":"N Ding","year":"2023","unstructured":"Ding, N., Qin, Y., Yang, G., et al.: Parameter-efficient fine-tuning of large-scale pre-trained language models. Nat. Mach. Intell. 5, 220\u2013235 (2023). https:\/\/doi.org\/10.1038\/s42256-023-00626-4","journal-title":"Nat. Mach. Intell."},{"key":"992_CR108","unstructured":"Parthasarathy, V.B., Zafar, A., Khan, A., Shahid, A.: The ultimate guide to fine-tuning LLMs from basics to breakthroughs: an exhaustive review of technologies, research, best practices, applied research challenges and opportunities (2024). arXiv:2408.13296v1[cs.LG]"},{"key":"992_CR109","doi-asserted-by":"crossref","unstructured":"Li, X.L., Liang, P.: Prefix-tuning: optimizing continuous prompts for generation. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing, vol 1: Long Papers, pp. 4582\u20134597. Association for Computational Linguistics (2021)","DOI":"10.18653\/v1\/2021.acl-long.353"},{"key":"992_CR110","unstructured":"Husain, H., Wu, H.H., Gazit, T., Allamanis, M., Brockschmidt, M.: CodeSearchNet challenge: evaluating the state of semantic code search (2020). arXiv:1909.09436v3 [cs.LG]"},{"key":"992_CR111","unstructured":"Gao, L., Biderman, S., Black, S., Golding, L., Hoppe, T., Foster, C., Phang, J., He, H., Thite, A., Nabeshima, A., Presser, S., Leahy, C.: The pile: an 800GB dataset of diverse text for language modeling (2020). arXiv:2101.00027v1 [cs.CL]"},{"key":"992_CR112","unstructured":"Kocetkov, D., Li, R., Allal, L.B., Li, J., Mou, C., Ferrandis, C.M., Jernite, Y., Mitchell, M., Hughes, S., Wolf, T., Bahdanau, D., von Werra, L., de Vries, H.: The stack: 3 TB of permissively licensed source code (2022). arXiv:2211.15533v1 [cs.CL]"},{"key":"992_CR113","unstructured":"Lozhkov, A., Li, R., Allal, L.B., et al.: StarCoder 2 and the Stack v2: the next generation (2024). arXiv:2402.19173v1 [cs.SE]"},{"key":"992_CR114","unstructured":"Lauren\u00e7on, H., Saulnier, L., Wang, T., Akiki, C., et al.: The BigScience ROOTS corpus: A 1.6TB composite multilingual dataset (2023). arXiv:2303.03915v1 [cs.CL]"},{"key":"992_CR115","unstructured":"Abadji, J., Suarez, P.O., Romary, L., Sagot, B.: Towards a cleaner document-oriented multilingual crawled corpus (2022). arXiv:2201.06642v1 [cs.CL]"},{"key":"992_CR116","doi-asserted-by":"crossref","unstructured":"Barbaresi, A.: Trafilatura: A web scraping library and command-line tool for text discovery and extraction. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing: System Demonstrations, pp. 122\u2013131. Association for Computational Linguistics (2021)","DOI":"10.18653\/v1\/2021.acl-demo.15"},{"key":"992_CR117","unstructured":"Wenzek, G., Lachaux, M.-A., Conneau, A., Chaudhary, V., Guzman, F., Joulin, A., Grave, E.: Ccnet: extracting high quality monolingual datasets from web crawl data. In: Proceedings of the 12th Language Resources and Evaluation Conference, pp. 4003\u20134012 (2020)"},{"key":"992_CR118","unstructured":"Mitre cve datagbase. https:\/\/cve.mitre.org\/. Accessed 2 Oct 2024"},{"key":"992_CR119","unstructured":"MITRE.: CWE-Common Weakness Enumeration. MITRE, https:\/\/cwe.mitre.org\/data\/downloads.html. Accessed 7 Oct 2024"},{"key":"992_CR120","unstructured":"Official CAPEC website: https:\/\/capec.mitre.org\/data\/downloads. Accessed 7 Oct 2024"},{"key":"992_CR121","doi-asserted-by":"crossref","unstructured":"Bhandari, G.P., Naseer, A., Moonen, L.: CVEfixes: automated collection of vulnerabilities and their fixes from open-source software. In: PROMISE (2021). arXiv:2107.08760v1","DOI":"10.1145\/3475960.3475985"},{"key":"992_CR122","unstructured":"Software assurance reference dataset (2024). https:\/\/samate.nist.gov\/SARD\/. Accessed 10 Oct 2024"},{"issue":"04","key":"992_CR123","doi-asserted-by":"publisher","first-page":"2244","DOI":"10.1109\/TDSC.2021.3051525","volume":"19","author":"Z Li","year":"2022","unstructured":"Li, Z., et al.: SySeVR: a framework for using deep learning to detect software vulnerabilities. IEEE Trans. Depend. Secure Comput. 19(04), 2244\u20132258 (2022). https:\/\/doi.org\/10.1109\/TDSC.2021.3051525","journal-title":"IEEE Trans. Depend. Secure Comput."},{"key":"992_CR124","first-page":"68","volume":"32","author":"Y Zhou","year":"2019","unstructured":"Zhou, Y., Liu, S., Siow, J., Xiaoning, D., Liu, Y.: Devign: effective vulnerability identification by learning comprehensive program semantics via graph neural networks. Adv. Neural. Inf. Process. Syst. 32, 68 (2019)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"992_CR125","doi-asserted-by":"publisher","unstructured":"Fan, J., Li, Y., Wang, S., Nguyen, T.N.: A C\/C++ code vulnerability dataset with code changes and CVE summaries. In: Proceedings of the 17th International Conference on Mining Software Repositories (Seoul, Republic of Korea) (MSR \u201920), pp. 508\u2013512. Association for Computing Machinery, New York (2020). https:\/\/doi.org\/10.1145\/3379597.3387501","DOI":"10.1145\/3379597.3387501"},{"key":"992_CR126","unstructured":"Ding, Y., Fu, Y., Ibrahim, O., Sitawarin, C., Chen, X., Alomair, B., Wagner, D., Ray, B., Chen, Y.: Vulnerability detection with code language models: how far are we? (2024). arXiv preprint arXiv:2403.18624v2 [cs.SE]"},{"key":"992_CR127","doi-asserted-by":"crossref","unstructured":"Fu, M., Tantithamthavorn, C.: Linevul: a transformer-based line-level vulnerability prediction. In: Proceedings of the 19th International Conference on Mining Software Repositories, MSR \u201922, pp. 608\u2013620. Association for Computing Machinery, New York (2022)s","DOI":"10.1145\/3524842.3528452"},{"key":"992_CR128","unstructured":"Yutaka, S.: The truth of the F-measure. Teach. Tutor Mater. (2007)"},{"issue":"8","key":"992_CR129","doi-asserted-by":"publisher","first-page":"861","DOI":"10.1016\/j.patrec.2005.10.010","volume":"27","author":"T Fawcett","year":"2006","unstructured":"Fawcett, T.: An introduction to ROC analysis. Pattern. Recognit. Lett. 27(8), 861\u2013874 (2006). https:\/\/doi.org\/10.1016\/j.patrec.2005.10.010","journal-title":"Pattern. Recognit. Lett."},{"key":"992_CR130","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1186\/s12859-015-0564-6","volume":"16","author":"G Tsatsaronis","year":"2015","unstructured":"Tsatsaronis, G., Balikas, G., Malakasiotis, P., Partalas, I., Zschunke, M., Alvers, M.R., Weissenborn, D., Krithara, A., Petridis, S., Polychronopoulos, D., et al.: An overview of the bioasq large-scale biomedical semantic indexing and question answering competition. BMC Bioinf. 16, 138 (2015). https:\/\/doi.org\/10.1186\/s12859-015-0564-6","journal-title":"BMC Bioinf."},{"key":"992_CR131","unstructured":"Asare, O.: Security evaluations of GitHub's Copilot. UWSpace (2023). http:\/\/hdl.handle.net\/10012\/19675"},{"key":"992_CR132","unstructured":"Ren, S., Guo, D., Lu, S., Zhou, L., Liu, S., Tang, D., Sundaresan, N., Zhou, M., Blanco, A., Ma, S.: Codebleu: a method for automatic evaluation of code synthesis (2020). arXiv:2009.10297v2 [cs.SE]"},{"key":"992_CR133","doi-asserted-by":"publisher","unstructured":"Chen, B., Song, J., Xu, P., Hu, X., Jiang, Z.M.J.: An automated approach to estimating code coverage measures via execution logs. In: 2018 33rd IEEE\/ACM International Conference on Automated Software Engineering (ASE), Montpellier, France, pp. 305\u2013316 (2018). https:\/\/doi.org\/10.1145\/3238147.3238214","DOI":"10.1145\/3238147.3238214"},{"key":"992_CR134","doi-asserted-by":"crossref","unstructured":"Papineni, K., Roukos, S., Ward, T., Zhu, W.-J.: BLEU: a method for automatic evaluation of machine translation. In: Proceedings of the 40th Annual Meeting of the Association for Computational Linguistics, pp. 311\u2013318 (2002)","DOI":"10.3115\/1073083.1073135"},{"key":"992_CR135","unstructured":"Farea, A., Yang, Z., Duong, K., Perera, N., Emmert-Streib, F.: Evaluation of question answering systems: complexity of judging a natural language (2022). arXiv:2209.12617v1 [cs.CL]"},{"key":"992_CR136","unstructured":"Lin, C.Y.: ROUGE: A package for automatic evaluation of summaries. In: Text Summarization Branches Out, pp. 74\u201381. Association for Computational Linguistics, Barcelona (2004)"},{"key":"992_CR137","unstructured":"Liu, Y., Deng, G., Li, Y., Wang, K., Wang, Z., Wang, X., Zhang, T., Liu, Y., Wang, H., Zheng, Y., Liu, Y.: Prompt injection attack against LLM-integrated applications (2024). arXiv:2306.05499v2"},{"key":"992_CR138","unstructured":"Pankajakshan, R., Biswal, S., Govindarajulu, Y., Gressel, G.: Mapping LLM security landscapes: a comprehensive stakeholder risk assessment proposal (2024). arXiv:2403.13309v1"},{"key":"992_CR139","unstructured":"Parra, G., Selvera, L., Khoury, J., Irizarry, H., Bou-Harb, E., Rad, P.: Interpretable federated transformer log learning for cloud threat forensics. In: Proceedings of the Network and Distributed Systems Security (NDSS) Symposium (2022)"},{"key":"992_CR140","doi-asserted-by":"crossref","unstructured":"Belle, V., Papantonis, I.: Principles and practice of explainable machine learning (2020). arXiv:2009.11698v1 [cs.LG]","DOI":"10.3389\/fdata.2021.688969"},{"key":"992_CR141","unstructured":"Lundberg, S., Lee. S.I.: A unified approach to interpreting model predictions (2017). arXiv:1705.07874v2 [cs.AI]"},{"key":"992_CR142","doi-asserted-by":"crossref","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: Why should I trust you?: Explaining the predictions of any classifier (2016). arXiv:1602.04938v3 [cs.LG]","DOI":"10.18653\/v1\/N16-3020"},{"key":"992_CR143","doi-asserted-by":"crossref","unstructured":"Altmeyer, P., van Deursen, A., Liem, C.C.S.: Explaining black-box models through counterfactuals (2023). arXiv:2308.07198v1 [cs.LG]","DOI":"10.21105\/jcon.00130"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-00992-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-00992-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-00992-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,30]],"date-time":"2025-03-30T04:02:36Z","timestamp":1743307356000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-00992-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,14]]},"references-count":143,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["992"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-00992-7","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,14]]},"assertion":[{"value":"29 January 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 February 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"78"}}